Verdict
controlware.com.bd is low-trust and potentially risky.
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
| What this site appears to be | Corporate website for Controlware, an engineering and power-project solutions provider in Dhaka, Bangladesh offering substation design, construction, maintenance, SCADA and solar projects with contact details and business hours. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 9.2 years oldRegistered history | Clear |
| Web archive | Archived since 2017Public history exists | Clear |
| Certificate | Encrypted connectionIssued by Sectigo Public Server Authentication CA DV R36 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2017.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
The website presents itself as Controlware, a Bangladesh-based engineering and power-project solutions provider. Its corporate pages describe substation design and maintenance, power-plant and solar projects, SCADA integration, industrial controls, equipment supply, and turnkey project management, with business hours and contact details intended to support business-to-business enquiries.
Scam/Impersonation Risk
The site's content is consistent with a conventional corporate engineering business and does not display obvious phishing mechanics, deceptive login prompts, cryptocurrency features, or sensitive transaction forms. However, this benign presentation is outweighed by a confirmed external blacklist signal, which creates a material contradiction between the site's stated corporate purpose and its external security reputation. The available evidence does not establish that the site is impersonating a named brand or operating a phishing form, but the blacklist result is sufficient to warrant a high level of caution for credentials, financial activity, or other sensitive interactions.
- The homepage and company pages describe Controlware as a power-engineering and industrial-solutions provider, including substation engineering, solar power generation, SCADA integration, equipment procurement, and maintenance services.
- Browser inspection recorded no login form, hidden sensitive form, password submission to an external destination, wallet connection, or clipboard-hijacking behavior.
- External reputation telemetry recorded 1 malicious and 1 suspicious result, alongside a confirmed blacklist status for the domain.
Regulatory Verification Notes
The site's About, Certification, Contact, and company-profile content provides a business name, service description, telephone contact, email contact, and stated operating hours. The available pages do not disclose a license number or clearly identify an independently verified legal entity, so the operator's real-world identity remains unverified and the site's regulatory standing is unclear. These are verification gaps rather than standalone proof of fraud; nevertheless, they are important given the separate external reputation contradiction. No matching broker profile was identified in the available third-party broker context.
- Domain continuity is 9.21 years; archived coverage contains 19 snapshots spanning 2017–2025, with 9 years tracked.
- The site's hosting infrastructure is identified as AS9230, Bangladesh Online Ltd. (BOL-BD-AP - Bangladesh Online Ltd., BD).
- Transport encryption uses a DV TLS certificate issued by Sectigo Public Server Authentication CA DV R36, valid through 2026-11-21.
- The homepage contains no disclosed license authority or license number in its business and certification content.
What to Verify Next
Before any sensitive engagement, an independent party should confirm that Controlware is the intended legal counterparty through a government or sector-appropriate business registry and separately validate any claimed certifications with the issuing bodies. Contact details should be confirmed through an offline or independently sourced channel, and any proposed contract, invoice, payment instruction, or account-access request should be checked against a known business relationship rather than accepted from the website alone.
- The company and certification pages provide the stated business identity and credentials that require independent confirmation.
- The Contact page supplies the channels that should be cross-checked through an independent route.
- The site's stated B2B service model supports verification through a formal quotation, contract, and counterparty-review process.
Summary Verdict
The overall posture is low trust with a material sensitive-interaction risk. The professional corporate presentation and absence of observed abusive web behavior do not resolve the confirmed external reputation contradiction or the unverified operator identity. Passive review may be appropriate, but the available evidence does not support treating the site as dependable for sensitive engagement.
Infrastructure Integrity
The site is served directly through infrastructure associated with Bangladesh Online Ltd. rather than an identified mainstream CDN or WAF layer. Its valid DV TLS certificate provides transport encryption, but that control confirms encrypted delivery only and does not establish the legitimacy of the operator or offset the external reputation concern.
Closing Assessment
Sensitive actions should remain on hold until the counterparty, business credentials, and transaction instructions have been independently confirmed through trusted channels.
Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
1 finding contributed to this verdict, raised by analysis engine.
01 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of controlware.com.bd.
- The request stayed on controlware.com.bd. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2017-06-02. Clear
- It is hosted on BOL-BD-AP, from a server in BD. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | BOL-BD-AP - Bangladesh Online Ltd., BD |
| Country | BD |
| Server IP | 182.163.127.41 |
| Name servers | Not available |
| SSL issuer | Sectigo Public Server Authentication CA DV R36 |
| SSL expiry | 2026-11-21 |
| Domain age | 9.21 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2017-06-02 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about controlware.com.bd at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.